Contact
Mollusan Europe sp. z o.o.
ul. Katowicka 45/38, 61-131 Poznań,
NIP: PL7822865385,
REGON: 383820396
KRS: 0000793871
@: office@mollusan.com
T: +48 508 929 049
Online store privacy policy
This document sets out the privacy principles at the mollusan.com Online Store and at www.mollusan.com. The administrator of personal data is the company Mollusan Europe Spółka z ograniczoną odpowiedzialnością, (limited liability company) with its registered seat in Poznań, Poland in Katowicka 45/38, 61-131 entered into the National Court Register – Register of Entrepreneurs under the KRS number: 0000793871; Statistical No. (REGON): 383820396; Tax identification number (NIP): PL7822865385, e-mail office@mollusan.com
For the purposes of this document, the definitions contained in the regulations available at www.mollusan.com/regulamin apply.
The personal data Administrator ensures that he makes every effort to ensure that personal data is processed with the greatest respect for the privacy of the persons whose data is processed and with the utmost care for the security of personal data being processed, and in particular ensures that he has taken all measures prescribed by law to securing personal data files.
The scope of processed personal data, purposes and legal basis
The Administrator collects information provided voluntarily by customers of the Online Store and visitors to the website www.mollusan.com (hereinafter collectively referred to as “Users”). In addition, the Administrator may save information about access parameters such as IP address, proxy server, name of the session, device, operating system and browser of the User, location and name of internet service providers or mobile service providers for technical purposes related to server administration, in order to perform the contract, whose party is the data subject (pursuant to art.6 par.1 letter b of the GDPR as transposed to the Polish law) and to generate aggregate and statistical information (e.g. about the region from which the connection takes place), on the basis of which the User cannot be identified, such as also for security purposes.
1. Personal data collected by the Administrator are processed in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95 / 46 / EC (hereinafter referred to as “GDPR”), the Act of 18 July 2002 on the provision of electronic services (i.e., Journal of Laws of 2017, item 1219, as amended) and the Act of 16 July 2004 – Telecommunications Law (i.e., Journal of Laws of 2017, item 1907, as amended).
2. The processing of customer and user data takes place in the scope of:
a. preparing and answering queries sent via the contact form or the contact form of the Customer Service Office (scope of data: name, surname, email address, telephone number, order number) – pursuant to art. 6 clause 1 lit. b GDPR, i.e. due to the fact that processing is necessary to perform a contract to which the data subject is a party,
b. conducting direct marketing (scope of data: name, surname, address, email address, telephone number and data on the User’s activity registered and stored through cookies) – pursuant to art. 6 clause 1 lit. f GDPR, i.e. due to the fact that processing is necessary for purposes arising from legitimate interests pursued by the Administrator or by a third party,
c. the provision of electronic services by the Administrator within the meaning of the Act of 18 July 2002 on the provision of electronic services, consisting of maintaining an account in the Online Store, sending a newsletter, enabling the addition of opinions and comments in the online store (scope of data: name, surname, address, delivery address, email address, phone number, password) – pursuant to art. 6 clause 1 letter b of GDPR, i.e. due to the fact that processing is necessary to perform a contract to which the data subject is a party,
d. conclusion and performance of the sales contract, including for issuing a VAT invoice and delivery of the goods (scope of data: name, surname, address, delivery address, email address, telephone number, password) – pursuant to art. 6 clause 1 letter b of GDPR, i.e. due to the fact that processing is necessary to perform a contract to which the data subject is a party,
e. pursuing receivables (scope of data: name, surname, address, delivery address, email address, telephone number, other data necessary to prove the existence of a claim or to defend rights) – pursuant to art. 6 clause 1 letter f of GDPR, i.e. due to the fact that the processing is necessary for purposes resulting from legitimate interests pursued by the Administrator or by a third party,
f. fulfilling legal obligations incumbent on the Administrator in connection with conducting business activity (scope of data: all data obtained from the User) – pursuant to art. 6 clause 1 letter c of GDPR, i.e. due to the fact that processing is necessary to fulfil the legal obligation incumbent on the Administrator,
g. conducting marketing and promotional activities (scope of data: name, surname, address, email address, telephone number) – based on a separate consent (art.6 par.1 letter a of GDPR),
h. sending commercial information by electronic means in accordance with art. 10 paragraph 2 of the Act on the provision of electronic services of July 18, 2002 (scope of data: name, surname, address, delivery address, email address, telephone number) – based on a separate consent,
i. the use of telecommunications terminal equipment and automatic calling systems for direct marketing purposes in accordance with art. 172 of the Telecommunications Act of July 16, 2004 (scope of data: name, surname, address, delivery address, email address, telephone number) – based on the consent given.
3. As part of the process of sending an inquiry using the contact form or the contact form of the Customer Service Office or account registration in the Online Store, the User receives the information referred to in art. 13 section 1 and 2 of the GDPR and may consent to the collection and processing of personal data by the Administrator in the manner and for the purposes described in the expressed consent and in this document. Providing personal data by the User is voluntary, but required:
a. to prepare and answer a question sent via the contact form or the contact form of the Customer Service Office, where failure to provide data will result in the Administrator being unable to handle the query,
b. to conclude and perform a contract for the provision of electronic services and a sales contract, where failure to provide data will result in the inability to conclude the contract.
The User is liable for providing false personal data.
4. Viewing the content of the Online Store and the website www.mollusan.com does not require the User to provide personal data other than automatically obtained information about connection parameters, unless access to them is conditioned by registering an Account. Failure to register the Account limits the possibility of using the Online Store.
The Administrator does not process Users’ personal data using tools for automated decision making, including profiling.
Personal data of Online Store Customers will be transferred to recipients listed in the “List of Data Recipients“. The list is constantly updated. The transfer of data to these entities takes place within the limits and on the principles provided for by applicable provisions.
Recipients not indicated above are not provided processed personal data in a form that would allow any identification of the User, unless the User has given his consent or if the obligation to provide the collected information results from applicable law.
Time of personal data processing
8. Personal data will be processed for the period of:
a. conducting correspondence initiated by the User’s question sent via the contact form or the contact form of the Customer Service Office – until its completion,
b. for the period necessary for the Administrator to provide electronic services or perform the contract, including after its performance due to the parties’ exercising their rights under the contract, as well as due to possible claims – until the expiry of claims or until the User deletes their Account in the Online Store, depending on which of the events occurs later,
c. until the consent is withdrawn or an objection to data processing is submitted – in cases of processing User’s personal data on the basis of a separate consent to conduct marketing and promotional activities or on the basis specified in art. 6, item 1 letter e or f of GDPR, including for direct marketing purposes,
d. corresponding to the life cycle of “cookies” saved on the User’s devices – in the case of processing User’s personal data only browsing the content of the Online Store and the website www.mollusan.com. Details on how the Administrator uses “cookies” can be found in the Cookies Policy.
9. The Administrator stores Users’ personal data after closing their Accounts in the Online Store also when it is necessary to fulfil their legal obligations, resolve disputes, enforce the User’s obligations under concluded contracts, maintain security, prevent fraud and abuse.
Rights of the User
The Administrator provides each User with realisation of the rights listed below. The user may exercise their rights by submitting a request by email at: office@mollusan.com
The User has the right to:
access data content – in accordance with art. 15 of GDPR,
rectification / updating of data – in accordance with art. 16 of GDPR,
delete data – in accordance with art. 17 of GDPR,
restrict data processing – in accordance with art. 18 of GDPR,
transfer data – in accordance with art. 20 of GDPR,
objecting to data processing – in accordance with art. 21 of GDPR,
withdraw their consent at any time, whereby withdrawal of consent does not affect the lawfulness of the processing that was carried out on the basis of consent before its withdrawal – in accordance with art. 7 item 3 of GDPR,
h. submitting a complaint to the supervisory body, i.e. the President of the Office for Personal Data Protection – in accordance with art. 77 GDPR.
The Administrator shall consider the request immediately, but no later than within one month of its receipt. However, if – due to the complicated nature of the request or the number of requests – the Administrator will not be able to consider the User’s request in the abovementioned will consider them within the next two months, informing the User in advance of the intended extension.
The Administrator informs about the rectification or deletion of personal data or the restriction of processing that he made in accordance with the User’s request to any recipient to whom personal data was disclosed, unless this proves impossible or requires a disproportionate effort.
Data processing principles
The Administrator ensures that the principles of personal data processing adopted by him ensure that all Users exercise their right under applicable law, and in particular the Administrator makes special efforts to protect the privacy and information provided to him and associated with Users.
The Administrator carefully selects and applies appropriate technical measures, including of a programming and organizational nature, ensuring the protection of processed data adequate to the threat and categories of data protected, in particular, protects data against unauthorized access, disclosure, loss and destruction, unauthorized modification as well as before their processing in violation of applicable law.
The Administrator supervises the security of data throughout the entire period of their possession in a way that ensures protection against unauthorized access, damage, deformation, destruction or loss of data.
The Online Store uses encrypted data transmission (SSL) during registration and logging in, which ensures the protection of data identifying the User and significantly hinders obtaining unauthorized data of the User enabling access to his Account.
The Online Store and the mollusan.com website may contain hyperlinks to other websites. The administrator is not responsible for the personal data protection policy used by these parties. The Administrator undertakes to exercise the necessary diligence so that Users are aware of using another website not belonging to the Administrator after using the hyperlink.
Change of privacy policy
The Administrator has the right to change this document. The User will be notified about that in a way that allows them to become familiar with the changes before they come into force, e.g. by posting relevant information on the main pages of the Online Store or website www.mollusan.com, and in the case of significant changes also by sending a notification to the e-mail address provided by the User.
In case of objections to the introduced changes, the User may request the removal of the Online Store Account. Continued use of the Online Store or website www.mollusan.com after publication or sending notification of changes to this document is considered as consent to the collection, use and sharing of User’s personal data according to the updated content of the document.
The privacy policy does not limit any rights of the User in accordance with generally applicable law.
Cookies policy
When browsing the Online Store, “cookies” are used, i.e. small text information that is saved on the User’s end device in connection with the use of the Online Store. Their use is aimed at the correct operation of the Online Store.
1. Cookies used by the Administrator are safe for the User’s device. In particular, it is not possible for viruses or other unwanted or malicious software to enter Users’ devices in this way. These files allow to identify the software used by the User and adapt the Online Store to each User individually. Cookies usually contain the name of the domain from which they originate, their storage time on the device and the assigned value.
2. The administrator uses the following types of “cookies”:
a. session “cookies”, which are stored on the device of the Online Store User and remain there until the end of the browser session. The saved information is then permanently deleted from the user’s device memory. The mechanism of session cookies does not allow for downloading any personal data or any confidential information from the User’s device,
permanent “cookies”, which are stored on the device of the Online Store User and remain there until they are deleted. Ending a given browser session or turning off the device by the User does not delete them.
The mechanism of permanent cookies does not allow downloading any personal data or any confidential information from the User’s device, statistical “cookies” enabling tracking of traffic in the Online Store, advertising “cookies” enabling delivery of content tailored to the User’s personal preferences.
3. The administrator uses “cookies” for the following purposes:
The Online Store configuration, enabling access to the Account and services and enabling smooth navigation on the Online Store’s pages and subpages (Administrator’s “cookies”),
creating statistics that help to understand how Online Store Users use websites, which allows improving their structure and content through analytical tools (e.g. Google Analytics, whose administrator is Google Inc. based in the USA (“cookies “third party) – Google’s privacy policy is available at the following links: https://policies.google.com/privacy?hl=pl, https://policies.google.com/privacy/partners?hl=pl,
checking the status of indexing the site by Google search engine and optimizing the visibility of the site through analytical tools Google Search Console, which is administered by Google Inc. based in the USA (third party cookies) – Google’s privacy policy is available at the following links:https://policies.google.com/privacy?hl=pl, https://policies.google.com/privacy/partners?hl=pl,
Cookies may also be used by advertising networks, in particular the Google network (third party cookies), to display ads tailored to the manner in which the User uses the Online Store. For this purpose, information about the User’s navigation path or time spent on a given page may be stored, which will be used to conduct marketing campaigns and remarketing campaigns, including sending notifications in the browser (so-called web push notifications). In terms of information about User preferences collected by the Google advertising network, the User may view and edit information derived from “cookies” using the tool: https://www.google.com/ads/preferences/.
The Administrator recommends reading the privacy policy of the above-mentioned third parties in order to familiarize yourself with the rules of using “cookies” of these entities.
The User may independently and at any time change the settings for “cookies”, specifying the conditions for their storage and access to “cookies” on the User’s device. Changes to the settings referred to in the previous sentence can be made using the web browser settings used by the User or by using the service configuration. These settings can be changed in particular in such a way as to block the automatic handling of “cookies” in your web browser settings or to inform you whenever you place “cookies” on your device. Detailed information about the possibilities and ways of handling “cookies” are available in the settings of the software used by the User (web browser).
The User may at any time delete “cookies” using the functions available in the web browser he uses: e.g.:
Restricting the use of “cookies” may affect some functionalities available in the Online Store and cause difficulties, and even prevent the User from using some services. Therefore, it is recommended to use software with cookies enabled.